Lanark wrote:XFool wrote:It could only work if the hacker somehow had the same number.
Thats how a SIM swap works, they contact vodaphone or whover and get your phone number ported to their phone running a different SIM, they then get all your phone calls and SMS messages.
What they wont get is secure messages e.g. iMessage, Signal etc
I get that. My point is: how does that help here?
They get your phone calls - on their phone number. But THEY don't get the security call from the bank, or whoever, which will be to the user's original number, as registered with the bank via their account.
Of course, that is assuming the bank only allows changes to the registered number via the account, not via a 'new' phone number. Unless their security checking is superior to the phone provider's!
Or am I mistaking the relationship between User, SIM, phone and phone number? i.e. They could end up with the original phone number on another SIM without a security check? Think I'll stick with the landline number for this!